Resubmissions

03/03/2024, 13:03

240303-qasdvsbd658

13/02/2024, 03:33

240213-d379kahf983

03/02/2024, 15:28

240203-swdtpseghr6

05/10/2023, 16:45

231005-t9q7maeg273

25/09/2023, 01:40

230925-b3qneacf326

25/09/2023, 01:33

230925-byny1sce376

22/09/2023, 13:19

230922-qkqm1sgc4t3

22/09/2023, 12:21

230922-pjf7hsfh9w3

22/09/2023, 02:20

230922-csfk5abh8x3

20/09/2023, 17:25

230920-vzl1lahf9v3

Analysis

  • max time kernel
    732s
  • max time network
    750s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/03/2024, 13:03

General

  • Target
    Screenshot 2023-09-20 1.23.24 PM.png
  • Size 83KB
  • Sample240303-qasdvsbd65
  • SHA256 fee4e840b33cdd9603d779b87317293329f404e287e251e047f31cb6b7f87686
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs
  • Suspicious use of FindShellTrayWindow 41 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Screenshot 2023-09-20 1.23.24 PM.png"
    1⤵
      PID:5088
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • NTFS ADS
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1984
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd611946f8,0x7ffd61194708,0x7ffd61194718
        2⤵
          PID:3388
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2
          2⤵
            PID:1896
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
            2⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:3680
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2796 /prefetch:8
            2⤵
              PID:2664
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
              2⤵
                PID:1668
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
                2⤵
                  PID:4796
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
                  2⤵
                    PID:1892
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4248 /prefetch:1
                    2⤵
                      PID:1792
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
                      2⤵
                        PID:3952
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
                        2⤵
                          PID:4680
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
                          2⤵
                            PID:2752
                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3628 /prefetch:8
                            2⤵
                              PID:4312
                            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3628 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:2728
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
                              2⤵
                                PID:1792
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
                                2⤵
                                  PID:112
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
                                  2⤵
                                    PID:848
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
                                    2⤵
                                      PID:2856
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4108 /prefetch:1
                                      2⤵
                                        PID:1512
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 /prefetch:8
                                        2⤵
                                          PID:428
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5744 /prefetch:8
                                          2⤵
                                          • Modifies registry class
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:3444
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
                                          2⤵
                                            PID:3204
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
                                            2⤵
                                              PID:5328
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
                                              2⤵
                                                PID:5416
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
                                                2⤵
                                                  PID:5540
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
                                                  2⤵
                                                    PID:6088
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=4740 /prefetch:8
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:2668
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4180 /prefetch:2
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:5224
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3660 /prefetch:8
                                                    2⤵
                                                      PID:5876
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1880 /prefetch:1
                                                      2⤵
                                                        PID:5664
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
                                                        2⤵
                                                          PID:5980
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1
                                                          2⤵
                                                            PID:5536
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
                                                            2⤵
                                                              PID:3128
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7132 /prefetch:8
                                                              2⤵
                                                                PID:1876
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3556 /prefetch:1
                                                                2⤵
                                                                  PID:5304
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
                                                                  2⤵
                                                                    PID:5500
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
                                                                    2⤵
                                                                      PID:4288
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
                                                                      2⤵
                                                                        PID:5724
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
                                                                        2⤵
                                                                          PID:5964
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
                                                                          2⤵
                                                                            PID:3296
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
                                                                            2⤵
                                                                              PID:5636
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
                                                                              2⤵
                                                                                PID:4032
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6824 /prefetch:1
                                                                                2⤵
                                                                                  PID:4580
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
                                                                                  2⤵
                                                                                    PID:2392
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3042196178785396938,11208187955131032645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3560 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5192
                                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                    1⤵
                                                                                      PID:2668
                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                      1⤵
                                                                                        PID:2512
                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                        1⤵
                                                                                          PID:5188

                                                                                        Network

                                                                                              MITRE ATT&CK Enterprise v15

                                                                                              Replay Monitor

                                                                                              Loading Replay Monitor...

                                                                                              Downloads

                                                                                              settings.dat

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                              • Size 152B
                                                                                              • SHA256 d34331aa91a21e127bbe68f55c4c1898c429d9d43545c3253d317ffb105aa24e
                                                                                              • MD5 SHA1 SHA512

                                                                                              settings.dat

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                              • Size 152B
                                                                                              • SHA256 3619c3b82a8cbdce37bfd88b66d4fdfcd728a1112b05eb26998bea527d187932
                                                                                              • MD5 SHA1 SHA512

                                                                                              f_000017

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
                                                                                              • Size 86KB
                                                                                              • SHA256 4802ef9f543284149172e16797e0342089b3ac1e4258c4b28714aa7bfea06073
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              f_000036

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036
                                                                                              • Size 48KB
                                                                                              • SHA256 e9515acb1b0c8f7c1008358ed424d6563cae681f0e87c53547d0cb7b9f51b051
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              f_000101

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000101
                                                                                              • Size 51KB
                                                                                              • SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              08a228d108d0dbd3_0

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\08a228d108d0dbd3_0
                                                                                              • Size 316B
                                                                                              • SHA256 3bcb59f9b96d66c0d7ceb3303ca3b339a4d45c25c2da18ea0014e082deaadc63
                                                                                              • MD5 SHA1 SHA512

                                                                                              93cd70d4ad043a47_0

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\93cd70d4ad043a47_0
                                                                                              • Size 74KB
                                                                                              • SHA256 4e8cc5ef39ed693363da814198dad9624307e5544e09ae231880a56b38f8e32d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              temp-index

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                              • Size 6KB
                                                                                              • SHA256 32830f7efce6fdc37042848f08c48bc412f1dd5f38bc6e0cfe255d97b1288180
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              the-real-index

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 6KB
                                                                                              • SHA256 856612c6333f5294166b5eb2a05d805edac36f78ae900bb993ff53e3dbd3eb5c
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              the-real-index

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 3KB
                                                                                              • SHA256 389e9ae3e16e3c54d1db8c8d137d277095f1df3252490d46fc53de7e798dd450
                                                                                              • MD5 SHA1 SHA512

                                                                                              the-real-index

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 7KB
                                                                                              • SHA256 d249dbb5031535091658fc447b41b6177e118add53bd15cca69a587b5fea14de
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              the-real-index

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 5KB
                                                                                              • SHA256 7fd0ff1423ba9351192d3381c62fdd44cb15436ad17cad31a42151b942d83602
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              CURRENT

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
                                                                                              • Size 16B
                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 c1f79bf63c6e9c5e9d850ff434fdd862e4547f89d3ee82ccac0af10c390464e3
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 392B
                                                                                              • SHA256 de597e6ffc34ee6fe53510fbd6282c3bbcaeb2aeb13339ef6256a7c5afd37071
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 5c4f0e56704e14d6501f5842d6237c433841b352f7bc8a258df1946db78fc54e
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 7dfc272017fcacecf50b7e04e9a25670c7c3de928c7cede8577a31c4b0f88662
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 3299b78f934863fd7f30ddb43595fad9d280389ca14d52056325f1681bc5c680
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 025fafb360679bdc02d74a520f2c46822d99e1f4427f03d5bca8db4bc4c9a12c
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 a38ffd0487e245883cafd9b4f90e7f04d8548010b1d6f2948f09595e0dec1d98
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 f17da9d03337b93dc4ae4853fba0c1b364c971c375f6fa11a0b0352448a51322
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                              • Size 389B
                                                                                              • SHA256 9168d6be07920720ba0e6bfca140b010f2c652b0867a19eead2b06cacc2f1c01
                                                                                              • MD5 SHA1 SHA512

                                                                                              LOG.old~RFe5999a6.TMP

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe5999a6.TMP
                                                                                              • Size 351B
                                                                                              • SHA256 1b2c2f9034fa8a8d943e10dd90159c7b976a8d9eaa3afb61d48cdf69d0f0f85c
                                                                                              • MD5 SHA1 SHA512

                                                                                              MANIFEST-000001

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                              • Size 23B
                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                              • MD5 SHA1 SHA512

                                                                                              Network Persistent State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                              • Size 111B
                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                              • MD5 SHA1 SHA512

                                                                                              Network Persistent State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                              • Size 3KB
                                                                                              • SHA256 0d0c2c9f443c8e56903de17da6eacbe602977f52916b7011064a9f8e05b34d21
                                                                                              • MD5 SHA1 SHA512

                                                                                              Network Persistent State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                              • Size 4KB
                                                                                              • SHA256 d1f3675a3c6750f5058a43fe06ed01863ef921fdc0a95c494c7cca7ac7f1c527
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Network Persistent State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                              • Size 3KB
                                                                                              • SHA256 37de8ccaa49342e69241bd528a91472d029601d6c72aa591ca1195bb52ba686a
                                                                                              • MD5 SHA1 SHA512

                                                                                              Network Persistent State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                              • Size 5KB
                                                                                              • SHA256 037dfe804fb71dbf507a8dac66d01577fff913a6dcd4e11f4992bc0d05526381
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Network Persistent State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                              • Size 1KB
                                                                                              • SHA256 ed9498e6b7bf906dc09b49ebb97a7013773ec4f87562a1e6d453962b3ff014c9
                                                                                              • MD5 SHA1 SHA512

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 e7299f477d84f493aa359e8a092522ece0b930534b16fb09522d19d54e02c0af
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 71c5210235735ba84a25e06d161bd17c6afac172bca4914fdde014ea8d88bfb9
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 6KB
                                                                                              • SHA256 504908f5285eff88fce3b2d15d0d74115a08e7adec1f62fd5f504796bd704be6
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 a8a4bed796d1d77d879effafaed0d6ef3895287097a6828162c958659e072674
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 dde3c51a3db95582e7939871a5b43bd9094d54f31c18d0fb1d095594e9b6ab1a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 6KB
                                                                                              • SHA256 c0942a8e06fa6cfee26b5e92b087f3ba99efbaff2e44e2e4dce6834943ea9408
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 70de741d6746a2d3f8c10dc25d4728c18074ba4dbceec7101866923f3358aedf
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 121bf59360cfd74f9478bd19c7f9b95662212121b6f64598b9816a17bd7647d2
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 5ce0aa0d1ac34adbd62af9cb172f5765dbf5b3e2da88c751c925550ec5898874
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 6KB
                                                                                              • SHA256 eebf2204ccc8604cb971b82ee8d46ac38db66463a4662c9698398efb3092f284
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 6KB
                                                                                              • SHA256 9ca38230301468e97dbe42010eb4cd9f4583ad60c9596d173bb229ed6b5bfb56
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 732a53fae05d76650deb717db3078c598a173402c6a0fb750d13ac193565e000
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 667bcfee53f42fcad6df05674912caec4b79bc32c911ac9c7afffa3a65aa37fa
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Preferences

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 046667b6ee47770b0194eea4ddb1c78b514241639675a80b4ca39a75f2e865fd
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 a194e5a79347b21df732dbeda08c076e23c6bd09ed9538531966163088ce683d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 7a4fe2ef356f0e609d0da3844e5b9737d78488e35a97d038549db6063a6571f1
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 566eecc2351dd600bfb155bfc7937cd6d4fe16b14b97614f82b797b1e7762d08
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 5KB
                                                                                              • SHA256 e3934ade585e37335c374917a1633a7d2fd5784ffb7225dd70142e9d34d19479
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 5KB
                                                                                              • SHA256 4ef430b298316a85572c4189efedc0c5b6a86f2cabf8e5cb3282cd59873da18b
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 5KB
                                                                                              • SHA256 557d344b6792704b600f513c64219ec704ac8c63751180318cc2c2fd4bd39442
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 5KB
                                                                                              • SHA256 6b8bdf75cb2dc94da1bfa03ce6c0dfb7f3280a08d6e9f786d9a0533de50b637e
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 2b071fdfc01adbcfe62a77441275a22d9fd7ef5214934b5be6296ab8b1b6322b
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 2KB
                                                                                              • SHA256 3fdbc37606e979997d10e0ef3a273214a04cdae6fe8cd394a7e21e3c634307df
                                                                                              • MD5 SHA1 SHA512

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 2KB
                                                                                              • SHA256 be4aef64ac717bf514048409a574e03cbb234ff2beb6110481cc309de217a6e3
                                                                                              • MD5 SHA1 SHA512

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 2KB
                                                                                              • SHA256 84c69710a18bc32324e3be1014f8155b5510791eea418194c1bc0485ddb29cd8
                                                                                              • MD5 SHA1 SHA512

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 d7d298baff030c125f7d6d011f05e457d33883a00ef2f65de2449981cb551d1c
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 bf5b2a6ce9fea193fa203f678c46997fa1783040f5182ad2a1065fd64fc522d8
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 3cca5350aef9d59fbe2e86e3dabad4f821a4484f8929216b07ae90a3dc9369b1
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 a55df01f5e1681468ebcb05a1bd4467659cd6c588b0be0fcaad416104023c57e
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 ffca13356c950b8c20c3a59ac10b49e69808fcf495bcb6854153c8535b69714b
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 2KB
                                                                                              • SHA256 203080c442717f4853ff86c8461b84d45af538cddd6bab9fa4b3255a26687adc
                                                                                              • MD5 SHA1 SHA512

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 f4e212af329849d16bb3e0d8df2c6e6a34b91e3d4d98d15b6fefc60e0b4d8c45
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 71f17447aba044e9dd3ef096118edd9d61cf61b1a3a0f996ffa50846d5a4f4fb
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 7c9f3ef71aa244dcbdbbd7b48ecf1ed46fac13eea279b314314df048951e07f1
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 2KB
                                                                                              • SHA256 2b50308677b782472881a31ff50b02333b69c4f1f2622e36250cc208d231e0cd
                                                                                              • MD5 SHA1 SHA512

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 d62aaa1a971632a3206f67f14c87f5ecfac1e849b2cbbb6c43e734cb0e821f53
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 e8f6efc27c2878f8a0b7f2040d847de3f436ed08eaafebf34c63cf6094b6a47a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 c88e3007f4e9ac161c6eeb2a95afeb16f932b100ae96f5969414bfe2a58ad55a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 2f3861fc5bc949e3a548eb709333eb676f57b725640dc09972c759562783cfd8
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 c2eae60542b480b5f0a445d102a6483420753567ba96f87c84b5276ac13249c3
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 81eb1b713c351ab7b02d209cefc5d5a1857a54d38edb5dec186f7c56bb40c339
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 d87419f89db171f0a522958fedf1b293b0abbbd82067505bc1f83f1044a81d61
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 e32120791d4d67b8b6f02c862b55f9c7f4e7d647ac29b5a7382db645836e2b1d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 0203a3ff066ba605fabfb3bd4e302dcde68498c984f5e6e66779a9a5065a8bd4
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 357fc8568db72a5ba66e743d0e43e14a3943b69b6669a678b929a36635023d8b
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 f53194466ab415e2f2899ef36f59d10c491351d22ba6f806543d719954ec4fcf
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 3cde687e5522340e7994b970452d799d9af71fa741ae1c286ed94b1190f26778
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 7e07055fa07213080b68b4e33d525896b2bcb336c9ce6fa23093b3e1c597a9c4
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 baf41beaba19e03f47180bb322b9b4fb49437989682594211c4560590fe47965
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 4KB
                                                                                              • SHA256 f4d7d0b1821d7842b020207f459fc5327b4342e2a9178de4a466ccd18a7aeb0d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 c35ad2937b02ebf4036d65c3c5c4304ec7f8fc9de1c406a2b7f1d0c71868d8a2
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 960e0a6a71763c729d38e0a4254535aacf8b3904169c33c7e008027f99ecd256
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 61d7807d43cc87a1887eaf69d616eb4693013d8a91caad0a327fa7181493f40a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 5KB
                                                                                              • SHA256 0082cf83f67a8deacc2ce2d838e5ae6f5a8f0407a57ab974154ed9cf9aaedbd2
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 7a7615417ec5888f8c39897ed2e6a5440885c170970d2b8ced17a8f20ebed5c4
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 8a4e2f95f8fe9515e5a32b2e5136338e60198f71a6a4aaf785cff61619ce88bb
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 392f0eff2d6ee4e9e7b4c7f76b5da819852390743882b655f66e84f35cec31d5
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 b9c14a97c7d07fddb83c9a3712208f386ae4834e48c11ef130e49208b53501b8
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 55be6865866d9ae5758384dba9a7e56b5f647464bb900b4377774a62c2872e2a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 35e5f53945d64683fa1949050fd5466cdf3049c94e5e686df8be3afd8949d0f9
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 e3b25c0888b9016df3300d4249634dadc721c211321a3810f034e88e72e52141
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 e117e49db6dc32d28ad37254714bec2c08f2816e560c04eb591f5f899c3bff35
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 28345d00a02001cc43df0a24cdea803943d596894ca63ce7325043e2111fe123
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 6382c26f4186cbcab8853082ddb4f0a9d7feedb3db867ccdae16bb1e3c295db6
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 304cd15504fe9808bfd565f168a2403b767b912d0482a935c11701f02d0e5e00
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 29a50518a6ce1e1d1eab945d91cd88e91cd0fbcb06fde02ed4c178f7bf3ea0a4
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 c407a46ce1955b6956f9fc623df8507708f8aec89bf36f753d69a52d5485e19e
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 6864a1df2a1f60037aae6e055247e52ae9c35dac578d855fd714a448aa47a8c6
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                              • Size 6KB
                                                                                              • SHA256 61b4772f5d5e7f8a784211adfa6bf15442c2c357b3be7173791aace548eb7a4e
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              TransportSecurity~RFe584a81.TMP

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584a81.TMP
                                                                                              • Size 536B
                                                                                              • SHA256 690eccd73801d63cc43e0b89ebad68974bd867afd5e492fb243c24295e1679a4
                                                                                              • MD5 SHA1 SHA512

                                                                                              CURRENT

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                              • Size 16B
                                                                                              • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
                                                                                              • MD5 SHA1 SHA512

                                                                                              Local State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 11KB
                                                                                              • SHA256 39984b419dbffa3e0e36e30f502bc9c0ca3209cdb29f869e82fbfbf3885a032c
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Local State

                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 12KB
                                                                                              • SHA256 2cf43600f42147d59f53bf9deb1425c0727a3d47e477c3df69ee0833b9b93578
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              default.dic

                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                              • Size 2B
                                                                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                              • MD5 SHA1 SHA512